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Amendments to the Claims 

This listing of claims will replace all prior 
versions, and listings, of claims in the application: 
Listing of Claims: 

1-10 . (Cancelled) 

11. (Currently Amended) A cryptographic method 
employed between two entities exchanging information via a 
non- secure communication channel, each of the two entities 
comprising a memory readable by a machine, tangibly embodying 
a program of instruction executable by the machine to perform 
the method, the method including a step of multiplying an odd 
order point of a non-supersingular elliptic curve by an 
integer, wherein, for exchanging information via the non- 
secure communication channel, the step of multiplying is 
performed by addition and halving operations of points of said 
elliptic curve, the halving of a point P is defined as [[a:]] 



the unique odd order point D such that [2]D = P, 



the point D. 



2 



P denotes 



12. (Previously Presented) A method according to 
claim 11, where F 2 „ is a finite body of 2 n elements, E ( F 2 „ ) is 

the sub-group of an elliptic curve E defined by: 
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E(F 2 n ) = {<x,y)e F 2 n X F 2 n [y 2 + xy = x 3 + ax 2 + P} u {o} a J 6 F 2 n , p * 0 
and E [2 k ] is the set of points P of said elliptic curve such 
that P added 2 k times to itself gives the neutral element O, 
where k is an integer greater than or equal to 1, wherein a 
point P = (x,y) of said elliptic curve gives by said halving 



the point 



2 



p = (u 0 ,v 0 ) of said elliptic curve obtained by 



effecting the following operations: 

(a) seek a first value X Q such that X 0 2 + X Q = a + x; 

(b) calculate a second value u Q 2 such that u Q 2 = x {X 0 + 1) + y; 

(c) if k has the value 1, check if the equation: X 2 + X = a 2 + 
u 2 0 has solutions in F 2 n ; 

(d) if the check in step (c) is yes, calculate said halving as 
follows : 



u 0 = V U Q 2 * 



v 0 = u 0 (u 0 + X 0 ) , 



and 



2 



P = (u 0 , v 0 ) ; 



(e) if not, add x to said second value u Q 2 and 1 to said first 

value X 0 and calculate said halving as in step (d) ; 

(f) if k is greater than 1, perform an iterative calculation 
as follows: 

(i) seek a value X ± such that A, i 2 + X± = a + Ui_i ; and 
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(ii) then calculate the value u 2 ± such that u 2 ± = ui_i (X± + 



^i-i + Ui_ x +1) by incrementing i from i = l until the value u' 



k-l 



is obtained; 

(g) check whether the equation X 2 + X = a 2 + u\-i has solutions 
in F 2 n ; 

(h) if so, calculate said halving as follows: 



u 0 = V""o 



v 0 = u 0 (u 0 + X 0 ) , 



and 



2 



P = (u G/ v 0 ) ; and 



(i) if not, add x to the second value u Q and 1 to said first 
value X Q and calculate said halving as in step (h) . 



13. (Previously Presented) A method according to 
claim 11, where F 2 n is a finite body of 2 n elements, E(F 2 n ) is 
the sub-group of an elliptic curve E defined by: 

E(F 2 n ) = { (x,y) e F 2 n X F 2 n ly 2 + xy = x 3 + ox 2 + p} u {o} a, p e F 2 n , p ^ 0 
and E [2 k ] is the set of points P of said elliptic curve such 
that P added 2 k times to itself gives the neutral element O, 
where k is an integer greater than or equal to 1, wherein a 
point P = (x,y) of said elliptic curve gives by said halving 



the point 



2 



P = (u 0 , X Q ) of said elliptic curve, 
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with X Q = u 0 + v 0 /u 0 / obtained by effecting the following 
operations : 

(a) seek a first value X Q such that X 0 2 + = a + x; 

(b) calculate a second value u Q 2 such that : u G 2 = x (A, 0 + 1) + 

y; 

(c) if k has the value 1, check if the equation : X 2 + X =oc 2 +u 0 2 
has solutions in F 2 n ; 

(d) if so, calculate said halving as follows : 



Uo = V U Q 2 / 



and 



P = (u G/ A, Q ) ; 



(e) if not, add x to said second value u G 2 and 1 to said first 



value X Q and calculate said halving as in step (d) ; 

(f) if k is greater than 1, perform the following iterative 
calculation : 

(i) seek a value X ± , such that X ± 2 + X± = a + Ui-i; and 

(ii) then calculate the value Ui 2 such that Ui 2 = Ui_i (X± + 

^i-i + Ui_i +1) by incrementing i from i = 1 until the value u k _i 
is obtained; 

(g) check if the equation X 2 + X = a 2 + u\-i has solutions in 

F2n/ 

(h) if so, calculate said halving as follows: 
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2 



P = (u G/ X Q ) ; and 



(i) if not, add x to said second value u Q 2 and 1 to said first 
value X Q to calculate said halving as in step (h) . 



14. (Previously Presented) A method according to 
claim 11, where F 2 n is a finite body of 2 n elements, E(F 2 13 ) is 
the sub-group of an elliptic curve E defined by: 

E(F 2 n ) = { (x,y)e F 2 n X F 2 n ly 2 + xy = x 3 + ox 2 + p} {o} a, p e F 2 n , p * 0 
and E [2 k ] is the set of points P of said elliptic curve such 
that P added 2 k times to itself gives the neutral element O, 
where k is an integer greater than or equal to 1, wherein a 

point P = (x,y) of said elliptic curve represented by (x,A, p ) 



with A, p = x + y/x gives by said halving the point 



2 



P = (u 0l 



v 0 ) of said elliptic curve obtained by effecting the following 
operations : 

(a) seek a first value X Q such that X Q 2 + A, G = oc + x; 

(b) calculate a second value u Q 2 such that u Q 2 = x (X Q + Ap + x 
+ 1) ; 

(c) if k has the value 1, check if the equation: X 2 + X = a 2 
+ u 0 2 has solutions in F 2 n ; 



(d) if so, calculate said halving as follows: 
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Uo = V U 0 2 ' 



V 0 = U 0 (U 0 + ^o) / 



and 



2 



P = (u D/ v 0 ) ; 



(e) if not, add x to said second value u G and 1 to said first 

value A, 0 and calculate said halving as in step (d) ; 

(f) if k is greater than 1, perform the following iterative 
calculation : 



(i) seek a value X± such that X 2 + X± - a + Ui_i; and 

(ii) then calculate the value Ui such that Ui = ui_i (X± + 

A-i-i + ui-i + 1) incrementing i from i = l until the value u\-i is 
obtained; 

(g) check if the equation X 2 + X = a 2 + u 2 k _! has solutions in 

^ 2 / 

(h) if so, calculate said halving as follows: 



v 0 = u 0 (u 0 + A, G ) , 



and 



J. 
2 



P = (u 0/ v 0 ) ; and 



(i) if not, add x to said second value u 0 2 and 1 to said first 



value X Q and calculate said halving as in step (h) 
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15. (Previously Presented) A method according to claim 
11, where F 2 n is a finite body of 2 n elements, E(F 2 n ) is the 
sub-group of an elliptic curve E defined by: 

E(F 2 n ) = { (x,y)e F 2 n X F 2 n ly 2 + xy = x 3 + ox 2 + p} U {o} a, p e F 2 n , p * 0 
and E [2 k ] is the set of points P of said elliptic curve such 
that P added 2 k times to itself gives the neutral element 0, 
where k is an integer greater than or equal to 1, wherein a 

point P = (x,y) of said elliptic curve represented by (x,Xp) 



with X p = x + y/x gives by said halving the point 



2 



P = (u 0 , 



v 0 ) of said elliptic curve represented by 

(u 0 , X Q ) , with A, Q = u 0 + v 0 /u 0 obtained by effecting the 
following operations : 

(a) seek for a first value X Q such that X 0 2 + ^ G = a + x; 

(b) calculate a second value u Q 2 such that u Q 2 = x (X Q + Xp + x 

+ i) ; 

(c) if k has the value 1, check if the equation X 2 + X = a 2 + 
u 0 2 has solutions in F 2 n ; 

(d) if so, calculate said halving as follows: 



u 0 = V u o 2 / 



and 



2 



P = (u 0 , X 0 ) J 
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(e) if not, add x to said second value u Q and 1 to said first 

value X Q and calculate said halving as in step (d) ; 

(f) if k is greater than 1, perform the following iterative 
calculation : 

(i) seek a value X ± such that X ± 2 + X± = a + Ui_i; and 

(ii) then calculate the value Uj. 2 such that Ui 2 = u±. x + 

X±-± + Ui-i + 1) incrementing i from i = l until the value u\-i is 
obtained; 

(g) check if the equation X 2 + A, = a 2 + u 2 k-i has solutions in 
F 2 n ; 

(h) if so, calculate said halving as follows: 



u 0 = V U Q 2 / 



and 



2 



P = (u 0 , X 0 ) ; and 



(i) if not, add x to said second value u G and 1 to said first 
value X 0 and calculate said halving as in step (h) . 

16. (Previously Presented) A method according to 
claim 11, further comprising constructing a common key from 
two secret keys respectively belonging to the aforementioned 
two entities and a public key consisting of the point P of odd 
order r of a chosen non-supersingular elliptic curve E. 
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17. (Previously Presented) A method according to claim 
16, wherein a and b are the secret keys of first and second 
entities, respectively, and: 

(a) the first entity calculates the scalar 
multiplication [a] P and sends the result point to the second 
entity, 

(b) the second entity calculates the scalar 
multiplication [b] P and sends the result point to the first 
entity, 

(c) the two entities respectively calculate a common 
point (C) = (x,y) of said elliptic curve (E) by respectively 
effecting the scalar multiplications [a] ( [b] P) and [b] 

( [a] P) , both equal to [a.b]P, and 

(d) the two entities choose as their common key the 
coordinate (x) of said common point (C) obtained by said 
scalar multiplication [a.b]P, at least one of the preceding 
scalar multiplications, and preferably all of them, being 
effected by means of predefined halvings. 

18. (Previously Presented) A method according to 
claim 11, further comprising calculating a signature between 
two entities based on a pair of permanent keys belonging to 
one of the entities, one secret (a) and the other public (Q) , 
by scalar multiplication of the secret key (a) by another 
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public key consisting of the point (P) of odd order r of a 
chosen non-supersingular elliptic curve (E) . 

19. (Previously Presented) A method according to claim 
18, further comprising the following operations: 

(a) the first entity (A) holding said pair of permanent 
keys constructs a single-use pair of keys, one key (g) being 
chosen arbitrarily and the other key [g] P resulting from 
scalar multiplication of said arbitrarily chosen key (g) by 
the public point P of said elliptic curve, the coordinates of 

the key ( [g] P) being denoted (x,y) with 2 < g < r-2, 

(b) the first entity (A) converts the polynomial x of 
said single-use key [g] P = (x,y) into an integer i whose 
binary value is represented by the sequence of binary 
coefficients of said polynomial x, 

(c) said first entity (A) calculates a signature (c,d) 
of the message (M) as follows: 

c = i modulo r 

d = g" 1 (M + ac) modulo r, 

(d) said first entity sends said message (M) and said 
signature (c, d) to said second entity; upon receiving it: 

(i) said second entity (B) checks if the elements 
of said signature (c,d) each belong to the range [1, r- 
1] , 
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(ii) if the check in step (i) is no, the second 
entity declares the signature invalid and stops; 

(iii) if the check in step (i) is yes, said second 
entity (B) calculates three parameters: 

h = d" 1 modulo r, 

hi = Mh modulo r, and 

h 2 = ch modulo r, 

(e) said second entity calculates a point T of said 
elliptic curve by summing the scalar multiplications of the 
points P and Q by the last two parameters cited: 
T = [hi] P + [h 2 ] Q, and 

(i) if the resultant point T is the neutral 
element, said second entity declares the signature 
invalid and stops; 

(ii) if the resultant point T is not the neutral 
element, considering the point T with coordinates x 1 and 
y 1 : T = (x' ,y " ) , 

(A) said second entity (B) converts the 
polynomial x' of that point into an integer i ? whose 
binary value is represented by the sequence of 
binary coefficients or said polynomial x', 

(B) said second entity (B) calculates c' = i' 
modulo r and, 
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(C) said second entity (B) checks if c ! = c, 
in which case said second entity (B) validates said 
signature, or if not, said second entity (B) 
invalidates said signature, at least one 
aforementioned scalar multiplication operation being 
effected by means of the predefined halvings. 

20. (Previously Presented) A method according to claim 
17, wherein scalar multiplication using halvings is obtained 
by the following operations: 

(e) if said scalar of the multiplication is denoted S, 

choose m+1 values So... Sm e {0,1} to define S as follows: 

™ ( r _i_ i A 1 
s = o V 2 J 

r being the aforementioned odd order and m being the 
single integer between log 2 (r) - 1 and log 2 (r), 

(f) calculate the scalar multiplication [S] P of a point 
P of said elliptic curve by the scalar S by applying an 
algorithm consisting of determining the series of points (Q m +i/ 
Q m »-/ Qi»*/ Qo) of said elliptic curve E such that : 

Qm+i = O (neutral element) , and 



Qi = [SJP + 



2 



Qi + x with o < i < m, and 



(g) calculate the last point Q Q of said series giving the 
result [S] P of said scalar multiplication. 
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21. (Previously Presented) A method according to 
claim 11, wherein said integer is decomposed as a set of 
values using powers of half said order, and said addition and 
halving operations are implemented dependent on said set of 
values . 
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